Yes. anti-spoofing is correct. The problems has been forwared to CP now so I'm waiting for an answer from them.
Our local Checkpoint Partner had seen the same problem with another one of their customers so they have reported the problem to CP. Regards, Torkel > -----Original Message----- > From: Bobby Tehranian [mailto:[EMAIL PROTECTED] > Sent: 6. april 2004 17:01 > To: [EMAIL PROTECTED] > Subject: Re: [FW-1] Problems getting trafikk from 172.27-range through > Che ckpoint R55 > > > Torkel, > > Have you looked at the anti-spoof rules on this interface? > > > On 4/6/04 5:17 AM, "Torkel Mathisen" <[EMAIL PROTECTED]> wrote: > > > No. Because the external interface on this firewall isn't our > > external interface to the ISP. Its actually to the rest of our > > networks. > > > > Regards, > > Torkel > > > >> -----Original Message----- > >> From: Ray Pesek [mailto:[EMAIL PROTECTED] > >> Sent: 5. april 2004 19:12 > >> To: [EMAIL PROTECTED] > >> Subject: Re: [FW-1] Problems getting trafikk from > 172.27-range through > >> Checkpoint R55 > >> > >> > >> Since that is a non-routable range, won't you have to NAT it? > >> > >> Ray > >> > >>> From: Torkel Mathisen <[EMAIL PROTECTED]> > >>> Reply-To: Mailing list for discussion of Firewall-1 > >>> <[EMAIL PROTECTED]> > >>> To: [EMAIL PROTECTED] > >>> Subject: [FW-1] Problems getting trafikk from 172.27-range through > >>> Checkpoint R55 > >>> Date: Mon, 5 Apr 2004 16:37:31 +0200 > >>> > >>> Hi > >>> > >>> I have a very strange problem here that I hope someone may have > >>> seen. > >>> > >>> One of our customers (with 172.27.0.0-range) needs to communicate > >>> with one of our servers (with an official ip-address). > >>> > >>> The customer is connected behind eth3 and our external interface > >>> (where our server is) is eth2. > >>> > >>> I can see the traffic on eth3, but nothing comes to eth2. > >>> > >>> All routing and anti-spoofing is correct and I get accept in our > >>> logs. > >>> > >>> fw monitor output gives: > >>> eth3:i[44]: 172.27.x.x -> x.x.x.x (TCP) len=44 id=769 > >>> eth3:I[44]: 172.27.x.x -> x.x.x.x (TCP) len=44 id=769 > >>> > >>> x.x.x.x is our official ip-address. > >>> > >>> I noticed the "Non unique ip address ranges" tab in > Global Properties > >>> and deleted the 172.16.0.0 - 172.31.255.255 range, but no luck. > >>> > >>> It looks to me that Checkpoint just won't route unoffical > >> ip-addresses > >>> in source out of external interface on the firewall, but > I can't seem > >>> to find out why or if its some kind of other problem. > >> Everything seems > >>> correct to me. > >>> > >>> Anyone seen this kind of behavior? > >>> > >>> Any thoughts would be helpful as I am stuck now. > >>> > >>> Regards, > >>> Torkel > >>> > >>> ================================================= > >>> To set vacation, Out-Of-Office, or away messages, > >>> send an email to [EMAIL PROTECTED] > >>> in the BODY of the email add: > >>> set fw-1-mailinglist nomail > >>> ================================================= > >>> To unsubscribe from this mailing list, > >>> please see the instructions at > >>> http://www.checkpoint.com/services/mailing.html > >>> ================================================= > >>> If you have any questions on how to change your > >>> subscription options, email > >>> [EMAIL PROTECTED] > >>> ================================================= > >> > >> _________________________________________________________________ > >> Persistent heartburn? Check out Digestive Health & Wellness > >> for information > >> and advice. http://gerd.msn.com/default.asp > >> > >> ================================================= > >> To set vacation, Out-Of-Office, or away messages, > >> send an email to [EMAIL PROTECTED] > >> in the BODY of the email add: > >> set fw-1-mailinglist nomail > >> ================================================= > >> To unsubscribe from this mailing list, > >> please see the instructions at > >> http://www.checkpoint.com/services/mailing.html > >> ================================================= > >> If you have any questions on how to change your > >> subscription options, email > >> [EMAIL PROTECTED] > >> ================================================= > >> > > > > ================================================= > > To set vacation, Out-Of-Office, or away messages, > > send an email to [EMAIL PROTECTED] > > in the BODY of the email add: > > set fw-1-mailinglist nomail > > ================================================= > > To unsubscribe from this mailing list, > > please see the instructions at > > http://www.checkpoint.com/services/mailing.html > > ================================================= > > If you have any questions on how to change your > > subscription options, email > > [EMAIL PROTECTED] > > ================================================= > > ================================================= > To set vacation, Out-Of-Office, or away messages, > send an email to [EMAIL PROTECTED] > in the BODY of the email add: > set fw-1-mailinglist nomail > ================================================= > To unsubscribe from this mailing list, > please see the instructions at > http://www.checkpoint.com/services/mailing.html > ================================================= > If you have any questions on how to change your > subscription options, email > [EMAIL PROTECTED] > ================================================= > ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
